CVE-2024-26948: linux-libc-dev - kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release
Summary
CVE-2024-26948: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dc_state NULL check in dc_state_release [How] Check wheather state is NULL before releasing it. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface. It is an essential component for building and running applications on Linux systems. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability identified as CVE-2024-26948 is a flaw in the drm/amd/display module of the Linux kernel. It allows an attacker to cause a NULL pointer dereference, leading to a denial of service (DoS) condition. The vulnerability arises due to a missing NULL check in the dc_state_release function. An attacker can exploit this vulnerability by sending specially crafted input to a vulnerable system, potentially resulting in a system crash or hang.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment. It is recommended to apply the official patch or update the linux-libc-dev package to a fixed version.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability in the drm/amd/display module of the Linux kernel. This vulnerability can be exploited by an attacker to cause a denial of service condition. Users are advised to update their linux-libc-dev package to a fixed version or apply the official patch. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
Linux-libc-dev is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel's C library interface.
The vulnerability allows an attacker to cause a denial of service (DoS) condition on a vulnerable system, potentially leading to system crashes or hangs.
To fix this vulnerability, update the linux-libc-dev package to a version that includes the patch for this issue. It is recommended to upgrade to a version higher than 6.1.90-1.
There is no known workaround for this vulnerability at the moment. It is recommended to apply the official patch or update the linux-libc-dev package to a fixed version.
You can find more information about this vulnerability in the references provided, including the official CVE entry and the Debian Security Tracker.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
